In the context of secure software architecture, what is the primary security concern introduced by virtual reality (VR) applications that is not typically present in traditional web applications?

The requirement for high-bandwidth streaming of 3D content

The collection and processing of sensitive biometric and spatial data from the user's physical environment

The risk of motion sickness and physical discomfort for users

The need to encrypt data in transit between the client and server

What is the primary purpose of identifying security controls from architectural requirements?

To map controls to specific threats and risks identified in the architecture

To satisfy all regulatory requirements regardless of risk

To select the most expensive controls available

To implement every possible security control

What is the primary purpose of including a version number or timestamp in a signed software update?

To provide a human-readable label for support and release notes.

To enable the client to reject older or replayed updates, preventing rollback attacks.

To ensure the update is compatible with the client's operating system and hardware.

To allow the update server to track how many clients have downloaded the update.

In a secure software architecture, which scenario is the most appropriate use of a secure element?

Storing the private key used for signing mobile payment transactions

Rendering user interface components for a mobile application

Caching frequently accessed database query results to improve performance

Logging application errors and warnings to a local file for debugging

In a wireless sensor network, what is the primary purpose of using a key predistribution scheme?

To distribute keys to sensor nodes after deployment using a central server

To use a single shared key for all sensor nodes to simplify key management

To generate new keys on each sensor node using its own random number generator

To load keys into sensor nodes before deployment so they can establish secure communication after deployment

Certified Secure Software Lifecycle Professional

Domain 4Objective 1

Define the Security Architecture CSSLP Practice Questions (Page 12)

Part of the Secure Software Architecture and Design domain, which accounts for 15% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 2–3 from this objective — we provide 117 practice questions to prepare you well beyond it. (estimate)

117questions here

24free pages

43concepts

15%of the exam

43 Concepts in This Objective

SABSA framework
Security chain of responsibility
Federated identity
Security controls identification
Security controls prioritization
Client-server architecture
Peer-to-peer (P2P) architecture
Message queuing architecture
N-tier architecture
Service-oriented architecture (SOA)
Enterprise service bus (ESB)
Web services security
Microservices security
Client-side exploits and threats
Remote code execution risks
Constant connectivity implications
IoT security fundamentals
Wireless security
Location-based services security
RFID security
NFC security
Sensor networks security
Mesh network security
Secure boot
Secure memory
Secure update
SaaS security
PaaS security
IaaS security
Implicit data collection privacy
Side-channel mitigation
Speculative execution mitigation
Secure element
Firmware security
Driver security
AI security
Virtual reality security
Augmented reality security
Facility-related IoT security
Automotive IoT security
Robotics security
Medical device security
Software-defined production processes

Questions 56–60

56foundation · easy
In the context of secure software architecture, what is the primary security concern introduced by virtual reality (VR) applications that is not typically present in traditional web applications?
Select an answer first
57foundation · easy
What is the primary purpose of identifying security controls from architectural requirements?
Select an answer first
58foundation · easy
What is the primary purpose of including a version number or timestamp in a signed software update?
Select an answer first
59foundation · easy
In a secure software architecture, which scenario is the most appropriate use of a secure element?
Select an answer first
60foundation · easy
In a wireless sensor network, what is the primary purpose of using a key predistribution scheme?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.